hide model attributes in redirects